Behavioral task
behavioral1
Sample
7531ff6d40493d67ac47ef25a0a421f3_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
7531ff6d40493d67ac47ef25a0a421f3_JaffaCakes118
-
Size
784KB
-
MD5
7531ff6d40493d67ac47ef25a0a421f3
-
SHA1
eba12bc835f4efb02debf501f9eab18e292ac0ca
-
SHA256
ba9d443bff18099eb3c92bc00ccdd1674b44260a5873c6e1b54e6e44f7bc272b
-
SHA512
b1dfe8159ad35e3828d1b7dc88cd7eb716d7ff8375f9abdab50690f4478ece9f6efc8db7ab95af8debab0db4ff6d85349a8f30127f9b2028b66fdb24d976d9f5
-
SSDEEP
24576:4mtFeOG+rhIKGRM7L15OvjC4HnCVX+tiP9T2vKOEOJVZw:DzvvmM7evFHnD7HrVZ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7531ff6d40493d67ac47ef25a0a421f3_JaffaCakes118
Files
-
7531ff6d40493d67ac47ef25a0a421f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 783KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE